Description
Unauthenticated Cross Site Scripting (XSS) in ManageWP Worker <= 4.9.31 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ManageWP | ManageWP Worker | ≤ 4.9.31 | — |
High · 7.1
CVE-2026-39463
EUVD-2026-36931GHSA-4382-xwj4-x54p
WordPress ManageWP Worker plugin <= 4.9.31 - Cross Site Scripting (XSS) vulnerability
Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack